List view

Attempting to use proc.a* fields (%proc.aname, %proc.apid...) in output w/o argument results in undefined behavior

kind/bugSomething isn't workingSomething isn't working

Status: Open.

#2229 In falcosecurity/libs;

· LucaGuerra opened on Jan 10, 2025

Add system call event field for fd.rip_rport and fd.sip_sport

kind/featureNew feature or requestNew feature or request

Status: Open.

#1981 In falcosecurity/libs;

· an1245 opened on Jul 31, 2024

New transformer: <code>concat(&lt;item1&gt;, &lt;item2&gt;, ...)</code>

kind/featureNew feature or requestNew feature or request

Status: Open.

#2025 In falcosecurity/libs;

· leogr opened on Aug 27, 2024

New transformer: <code>join(&lt;list&gt;, &lt;sep&gt;)</code>

kind/featureNew feature or requestNew feature or request

Status: Open.

#1925 In falcosecurity/libs;

· leogr opened on Jun 20, 2024

Add Fortify strings check to CI

kind/featureNew feature or requestNew feature or request

Status: Open.

#1882 In falcosecurity/libs;

· LucaGuerra opened on May 29, 2024

Improve visibility on the <code>ioctl</code> events

kind/featureNew feature or requestNew feature or request

Status: Open.

#1328 In falcosecurity/libs;

· Biagio-Dipalma opened on Sep 5, 2023

fd.name some times contain bogus &lt;UNKNOWN&gt; part in "Write below root" event

kind/bugSomething isn't workingSomething isn't working

Status: Open.

#1892 In falcosecurity/libs;

· petterreinholdtsen opened on Feb 27, 2024

wip: fix(plugin): enforce strict versioning for static plugins

approved

area/libsinsp

dco-signoff: yes

do-not-merge/work-in-progress

kind/bugSomething isn't workingSomething isn't working

release-note-none

size/XL

Status: Open (in progress).

falcosecurity/libsnumber 2278

#2278 In falcosecurity/libs;

· gnosek opened on Feb 11, 2025

[Tracking] Isolate libsinsp components from sinsp

kind/documentationImprovements or additions to documentationImprovements or additions to documentation

Status: Open.

#2343 In falcosecurity/libs;

· ekoops opened on Apr 14, 2025

fix(libscap): cgroupv2 path discovery with empty cgroup2 mountpoint

area/libscap

dco-signoff: yes

do-not-merge/hold

release-note-none

size/M

Status: Open (in progress).

falcosecurity/libsnumber 2404

#2404 In falcosecurity/libs;

· irozzo-1A opened on May 14, 2025

No support for Podman container activity capturing by container.id

kind/bugSomething isn't workingSomething isn't working

Status: Open.

#1115 In falcosecurity/libs;

· hashkeks opened on May 24, 2023

update(libsinsp): get_dynamic_field constness

area/libsinsp

dco-signoff: yes

release-note-none

size/S

Status: Open (in progress).

falcosecurity/libsnumber 2511

#2511 In falcosecurity/libs;

· deepskyblue86 opened on Jun 26, 2025

FR: TOCTOU mitigation without userspace enter events

kind/featureNew feature or requestNew feature or request

Status: Open.

#2407 In falcosecurity/libs;

· tuminoid opened on May 19, 2025

FR: Configuration flag support to disable enter event generation

kind/featureNew feature or requestNew feature or request

Status: Open.

#2408 In falcosecurity/libs;

· tuminoid opened on May 19, 2025

wip: feat!: isolate legacy bpf probe TOCTOU mitigation logic

approved

area/driver-bpf

area/libscap-engine-bpf

dco-signoff: yes

do-not-merge/hold

do-not-merge/work-in-progress

kind/design

kind/featureNew feature or requestNew feature or request

release-note-none

size/XXL

Status: Open (in progress).

falcosecurity/libsnumber 2586

#2586 In falcosecurity/libs;

· ekoops opened on Aug 20, 2025

vote: update(OWNERS): add Gerald Combs (geraldcombs) to approvers

area/proposals

dco-signoff: yes

do-not-merge/hold

do-not-merge/invalid-owners-file

kind/documentationImprovements or additions to documentationImprovements or additions to documentation

release-note-none

size/XS

Status: Open (in progress).

falcosecurity/libsnumber 2592

#2592 In falcosecurity/libs;

· geraldcombs opened on Aug 22, 2025

feat!: drop some syscalls enter events gen, testing and parsing code (part 3)

area/driver-bpf

area/driver-kmod

area/driver-modern-bpf

area/libpman

area/libsinsp

area/tests

dco-signoff: yes

do-not-merge/hold

kind/cleanup

kind/featureNew feature or requestNew feature or request

Status: Open (in progress).

falcosecurity/libsnumber 2594

#2594 In falcosecurity/libs;

· terror96 opened on Aug 28, 2025

chore(deps): Bump codecov/codecov-action from 5.4.3 to 5.5.0 in the actions group

approved

dco-signoff: yes

dependenciesPull requests that update a dependency filePull requests that update a dependency file

do-not-merge/release-note-label-needed

github_actionsPull requests that update GitHub Actions codePull requests that update GitHub Actions code

lgtm

size/XS

Status: Open (in progress).

falcosecurity/libsnumber 2593

#2593 In falcosecurity/libs;

· dependabot opened on Aug 25, 2025

update(driver): update syscalls tables and driver report.

dco-signoff: yes

release-note-none

size/M

Status: Open (in progress).

falcosecurity/libsnumber 2595

#2595 In falcosecurity/libs;

· github-actions opened on Sep 1, 2025

ci: bump zig version from <code>0.14.1</code> to <code>0.15.1</code>

approved

area/CI

dco-signoff: yes

release-note-none

size/XS

Status: Open (in progress).

falcosecurity/libsnumber 2596

#2596 In falcosecurity/libs;

· ekoops opened on Sep 1, 2025